Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File:                     T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier:          tcpCEBXUHSeQNgyJFHkScL8KennqpjkcHMLm739fWpg=
Subject key identifier:   76:B3:BA:BF:5C:24:A1:60:B4:71:BE:EC:C9:FA:43:D1:3C:1B:36:64
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer:       /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial:       0196447B83DA45F0399D777C1977607117C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number:          68
Signing time:             Thu 17 Apr 2025 16:01:07 +0000
Manifest this update:     Thu 17 Apr 2025 16:01:07 +0000
Manifest next update:     Fri 18 Apr 2025 16:01:07 +0000
Files and hashes:         1: MtCu6sFrD1432kk0IRfc5KNTGfc.roa (hash: mq6V3hOgU2VesW7dh8aKsr7RVyaB9UHKkJnet/uS01g=)
                          2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: E/seFS6fQU/FCJWS5cRQxWuYxJttJT0lKR0399F3bIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:83:da:45:f0:39:9d:77:7c:19:77:60:71:17:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
        Validity
            Not Before: Apr 17 16:01:07 2025 GMT
            Not After : Apr 18 16:01:07 2025 GMT
        Subject: CN=76b3babf5c24a160b471beecc9fa43d13c1b3664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:f6:c2:8c:9e:b2:70:50:18:c9:3f:37:76:
                    ff:c7:6d:01:29:d1:8b:27:92:ae:7f:44:19:1c:6b:
                    08:f4:92:1e:21:2f:d9:be:b1:a5:a5:67:2b:fc:bf:
                    82:5d:e3:20:55:bb:9f:06:2c:7b:2a:0a:b7:17:9b:
                    c1:1a:89:40:0d:9d:b7:38:31:a6:a0:a6:14:d9:4c:
                    da:0d:8a:b9:72:21:da:03:67:a0:00:e6:b7:5a:7f:
                    7c:f2:8b:ca:a2:41:81:7d:a7:29:49:73:d8:0c:94:
                    b6:b6:f2:f2:4d:cd:5d:5c:9c:f3:46:a4:29:b3:65:
                    cb:bc:73:eb:00:6f:fb:fd:7e:e3:cd:7a:85:5a:e1:
                    4c:3c:d5:5d:d6:71:e3:37:e5:2b:18:62:f5:05:86:
                    ed:a5:49:45:77:1f:66:05:22:bc:13:ec:75:3d:82:
                    c2:ee:19:f3:cb:bd:08:3f:a6:35:4e:68:95:03:19:
                    c3:a6:cd:cd:6c:75:bd:3b:b8:1d:05:f5:0a:86:ef:
                    12:0a:33:5e:42:e3:83:e2:5d:aa:29:0f:fd:90:37:
                    a1:34:f9:8e:9b:d2:d4:74:d6:ba:a6:b8:64:e4:4f:
                    2e:61:2f:4a:7c:0b:13:f6:80:f3:de:2c:77:be:2a:
                    d4:de:9c:a5:6d:57:68:a8:be:9d:b8:d1:a1:ef:cc:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B3:BA:BF:5C:24:A1:60:B4:71:BE:EC:C9:FA:43:D1:3C:1B:36:64
            X509v3 Authority Key Identifier:
                keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:31:14:fc:63:9f:fb:79:df:c8:9a:c9:0b:09:bc:0d:6d:ac:
         6b:c4:2f:21:cf:ff:03:40:ce:54:84:1c:69:bf:78:db:7a:24:
         ca:3a:82:db:2e:91:b0:d3:21:ce:f2:10:a5:37:45:ef:8d:80:
         0c:ab:7c:64:6a:cf:f6:ec:a8:3a:d0:2e:fa:10:ec:0e:a6:e3:
         8f:3a:b9:87:50:fe:c0:6c:32:21:b1:d4:46:4f:cf:ba:6d:cc:
         d7:1e:f0:e7:e2:cb:f6:9c:2f:1b:90:fc:0f:93:71:6b:d2:96:
         91:f2:56:ac:10:81:ce:89:14:e4:73:e5:ab:77:05:32:7f:3d:
         2b:6d:cf:b7:b3:68:92:f4:0a:0f:5f:81:b3:77:c6:27:44:fd:
         69:1a:67:a7:36:af:bb:d5:82:bc:cb:81:bf:ed:29:46:da:31:
         70:fa:90:df:98:fc:3f:75:d0:ad:53:40:40:d4:5d:f3:76:09:
         6e:a5:0f:7c:eb:d9:0a:40:dc:07:6e:0c:d2:d9:64:89:13:45:
         fd:26:37:60:2f:1c:1d:a4:1f:41:c7:74:4b:f6:3c:00:b3:2b:
         86:51:77:9b:80:b4:cb:e4:24:5e:90:55:ec:d2:85:a6:1d:2a:
         86:04:35:fa:e1:7c:2d:26:54:00:f2:86:e2:f8:a4:38:8a:5b:
         83:2f:46:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:52:27 2025 by rpki-client